EP2219376B1 - Cryptage/décryptage de données de programme hors données PSI - Google Patents
Cryptage/décryptage de données de programme hors données PSI Download PDFInfo
- Publication number
- EP2219376B1 EP2219376B1 EP10162797A EP10162797A EP2219376B1 EP 2219376 B1 EP2219376 B1 EP 2219376B1 EP 10162797 A EP10162797 A EP 10162797A EP 10162797 A EP10162797 A EP 10162797A EP 2219376 B1 EP2219376 B1 EP 2219376B1
- Authority
- EP
- European Patent Office
- Prior art keywords
- key
- encrypted
- program
- keys
- message
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 claims abstract description 35
- 230000004044 response Effects 0.000 claims abstract description 4
- 238000012986 modification Methods 0.000 claims description 149
- 230000004048 modification Effects 0.000 claims description 148
- 230000015654 memory Effects 0.000 claims description 142
- 230000001360 synchronised effect Effects 0.000 claims description 2
- 239000003607 modifier Substances 0.000 description 75
- 238000001824 photoionisation detection Methods 0.000 description 17
- 230000008569 process Effects 0.000 description 10
- 230000005540 biological transmission Effects 0.000 description 6
- 230000000295 complement effect Effects 0.000 description 4
- 238000010276 construction Methods 0.000 description 3
- 230000001419 dependent effect Effects 0.000 description 3
- 206010036618 Premenstrual syndrome Diseases 0.000 description 2
- 230000006870 function Effects 0.000 description 2
- 230000000246 remedial effect Effects 0.000 description 2
- 230000009471 action Effects 0.000 description 1
- 230000006978 adaptation Effects 0.000 description 1
- 238000013475 authorization Methods 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 230000000737 periodic effect Effects 0.000 description 1
- 238000011057 process analytical technology Methods 0.000 description 1
- 230000007704 transition Effects 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/12—Transmitting and receiving encryption devices synchronised or initially set up in a particular manner
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
- H04N21/23—Processing of content or additional data; Elementary server operations; Server middleware
- H04N21/234—Processing of video elementary streams, e.g. splicing of video streams or manipulating encoded video stream scene graphs
- H04N21/2347—Processing of video elementary streams, e.g. splicing of video streams or manipulating encoded video stream scene graphs involving video stream encryption
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/06—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols the encryption apparatus using shift registers or memories for block-wise or stream coding, e.g. DES systems or RC4; Hash functions; Pseudorandom sequence generators
- H04L9/065—Encryption by serially and continuously modifying data stream elements, e.g. stream cipher systems, RC4, SEAL or A5/3
- H04L9/0656—Pseudorandom key sequence combined element-for-element with data sequence, e.g. one-time-pad [OTP] or Vernam's cipher
- H04L9/0662—Pseudorandom key sequence combined element-for-element with data sequence, e.g. one-time-pad [OTP] or Vernam's cipher with particular pseudorandom sequence generator
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
- H04L9/0869—Generation of secret information including derivation or calculation of cryptographic keys or passwords involving random numbers or seeds
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/14—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using a plurality of keys or algorithms
- H04L9/16—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using a plurality of keys or algorithms the keys or algorithms being changed during operation
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
- H04N21/23—Processing of content or additional data; Elementary server operations; Server middleware
- H04N21/234—Processing of video elementary streams, e.g. splicing of video streams or manipulating encoded video stream scene graphs
- H04N21/2347—Processing of video elementary streams, e.g. splicing of video streams or manipulating encoded video stream scene graphs involving video stream encryption
- H04N21/23476—Processing of video elementary streams, e.g. splicing of video streams or manipulating encoded video stream scene graphs involving video stream encryption by partially encrypting, e.g. encrypting the ending portion of a movie
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
- H04N21/23—Processing of content or additional data; Elementary server operations; Server middleware
- H04N21/236—Assembling of a multiplex stream, e.g. transport stream, by combining a video stream with other content or additional data, e.g. inserting a URL [Uniform Resource Locator] into a video stream, multiplexing software data into a video stream; Remultiplexing of multiplex streams; Insertion of stuffing bits into the multiplex stream, e.g. to obtain a constant bit-rate; Assembling of a packetised elementary stream
- H04N21/2362—Generation or processing of Service Information [SI]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
- H04N21/23—Processing of content or additional data; Elementary server operations; Server middleware
- H04N21/238—Interfacing the downstream path of the transmission network, e.g. adapting the transmission rate of a video stream to network bandwidth; Processing of multiplex streams
- H04N21/2389—Multiplex stream processing, e.g. multiplex stream encrypting
- H04N21/23895—Multiplex stream processing, e.g. multiplex stream encrypting involving multiplex stream encryption
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
- H04N21/25—Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies
- H04N21/266—Channel or content management, e.g. generation and management of keys and entitlement messages in a conditional access system, merging a VOD unicast channel into a multicast channel
- H04N21/26606—Channel or content management, e.g. generation and management of keys and entitlement messages in a conditional access system, merging a VOD unicast channel into a multicast channel for generating or managing entitlement messages, e.g. Entitlement Control Message [ECM] or Entitlement Management Message [EMM]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
- H04N21/434—Disassembling of a multiplex stream, e.g. demultiplexing audio and video streams, extraction of additional data from a video stream; Remultiplexing of multiplex streams; Extraction or processing of SI; Disassembling of packetised elementary stream
- H04N21/4345—Extraction or processing of SI, e.g. extracting service information from an MPEG stream
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
- H04N21/438—Interfacing the downstream path of the transmission network originating from a server, e.g. retrieving encoded video stream packets from an IP network
- H04N21/4385—Multiplex stream processing, e.g. multiplex stream decrypting
- H04N21/43853—Multiplex stream processing, e.g. multiplex stream decrypting involving multiplex stream decryption
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
- H04N21/44—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs
- H04N21/4405—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs involving video stream decryption
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
- H04N21/44—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs
- H04N21/4405—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs involving video stream decryption
- H04N21/44055—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs involving video stream decryption by partially decrypting, e.g. decrypting a video stream that has been partially encrypted
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/47—End-user applications
- H04N21/472—End-user interface for requesting content, additional data or services; End-user interface for interacting with content, e.g. for content reservation or setting reminders, for requesting event notification, for manipulating displayed content
- H04N21/47211—End-user interface for requesting content, additional data or services; End-user interface for interacting with content, e.g. for content reservation or setting reminders, for requesting event notification, for manipulating displayed content for requesting pay-per-view content
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/80—Generation or processing of content or additional data by content creator independently of the distribution process; Content per se
- H04N21/83—Generation or processing of protective or descriptive data associated with content; Content structuring
- H04N21/835—Generation of protective data, e.g. certificates
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N7/00—Television systems
- H04N7/16—Analogue secrecy systems; Analogue subscription systems
- H04N7/167—Systems rendering the television signal unintelligible and subsequently intelligible
- H04N7/1675—Providing digital key or authorisation information for generation or regeneration of the scrambling sequence
Definitions
- the present invention relates to the encryption and decryption of data transmitted between a transmitter and a receiver and, more particularly, to the encryption and decryption of both data and the encryption keys used to encrypt the data.
- Copy protection systems have a number of security goals. For example, copy protection systems are intended to prevent the theft of high quality compressed digital content, to prevent theft of high quality uncompressed digital content, and to limit losses caused by break-ins.
- the copy protection system of the present invention is intended to thwart unauthorized -copying of content.
- the invention provides a triple wrap decryption method according to claim 1.
- Figure 1 illustrates an encryption encoder of a copy protection transmitter according to one embodiment not falling under the present invention
- FIG. 1 illustrates the data encryption block of Figure 1 in greater detail
- FIG 3 illustrates the dynamic keys block of Figure 1 in greater detail
- Figure 4 illustrates the key expansion block of Figure 3 in greater detail
- FIG. 5 illustrates portions of Figure 1 in greater detail
- Figure 6 illustrates the key modifier of Figure 5 in greater detail
- Figure 7 illustrates an example modifier message MM used in the copy protection system of Figure 1 ;
- Figure 8 illustrates a control portion of the modifier message MM illustrated in Figure 7 ;
- Figure 9 illustrates an example definition of the system control bytes of the modifier message MM illustrated in Figure 8 ;
- Figure 10 illustrates an example message segment MS used in the copy protection system of Figure 1 ;
- Figure 11 illustrates the program key, modification key, and modifier message MM encryption block of Figure 1 in greater detail
- Figure 12 illustrates an example key message that is part of the message segment MS illustrated in Figure 10 ;
- Figure 13 illustrates an example pair of message segments MS used to transmit program keys and modification keys
- Figure 14 illustrates the timing of the transmitter and receiver with respect to message generation and use
- Figure 15 illustrates an example rotation for applying the program keys PK during encryption of program data
- Figure 16 illustrates an example of the portions of a program data segment of a field to which the rotation is applied
- Figure 17 illustrates a decryption decoder of a copy protection receiver according to one embodiment of the present invention
- Figure 18 illustrates the data decryption block of Figure 17 in greater detail
- Figure 19 illustrates portions of the decryption decoder of Figure 17 in greater detail.
- Figure 20 illustrates the key and modifier message decryption block of Figure 17 in greater detail.
- an example encryption encoder 8 of a copy protection transmitter includes a PID filter 10 that receives an MPEG transport stream and that determines which packets in the MPEG transport stream contain data to be encrypted. As discussed below, the PID filter 10 also identifies null packets that are to be replaced with message segments MS that give the receiver sufficient information for decrypting the encrypted program data in the received signal, and the PID filter 10 further identifies packets containing information that is not to be encrypted.
- a dynamic program key and modification key generator 12 dynamically generates program keys PK that are applied by a first encryption engine 14 in order to encrypt the program data in the MPEG transport stream that has been selected for Encryption.
- the first encryption engine 14, for example, may be a single wrap encryption engine, and may be arranged to apply the single wrap encryption process specified in the Advanced Encryption Standard (AES).
- AES Advanced Encryption Standard
- the encrypted program data packets are supplied to one input of an output multiplexer 16.
- the dynamically generated program keys PK are applied through a multiplexer 24 whereupon they are themselves encrypted by a second encryption engine 18.
- the second Encryption engine 18 may be a triple wrap encryption engine, and may be arranged to apply the triple wrap encryption process specified in the Advanced Encryption Standard.
- the keys used by the second encryption engine 18 to encrypt the dynamically generated program keys PK are message segment keys.
- Fixed keys are stored in a memory 20, these fixed keys are used by a message segment key generator and control 22 to generates message segment keys, and the message segment keys are supplied to the second encryption engine 18.
- the fixed keys stored in the memory 20 are, for example, 128 bits long, and there are, for example, sixty-four fixed keys stored in the memory 20.
- the hash values discussed herein are, for example, sixty-four bits each and are derived as selected portions of the fixed keys. Alternatively, hash values may be separately stored in the memory 20, and the fixed keys and hash values may be of any desired length and number.
- the message segment key generator and control 22 selects the fixed keys to be used by the second encryption engine 18 from the memory 20, uses them to generate message segment keys, and supplies the message segment keys to the second encryption .engine 18.
- the second encryption engine 18 encrypts the dynamically generated program keys PK based on the message segment keys from the message segment key generator and control 22.
- a modifier message MM and modification keys MK are also applied through the multiplexer 24 and are encrypted by the second encryption engine 18.
- the encrypted dynamically generated program keys PK and the encrypted modifier message MM are assembled into program key message segments PKMS that are forwarded to the receiver.
- the encrypted modification keys MK, an encrypted checksum, and the encrypted modifier message MM are similarly assembled into modification key message segments MKMS that are also forwarded to the receiver.
- the modification keys which are dynamically generated by the program and modification key generator 12, are used with the fixed keys to generate the message segment keys that are used to encrypt the program keys, and the checksum is based on the fixed keys stored in the memory 20.
- the checksum for example, may comprise 128 bits, and may be generated from all of the fixed keys stored in the memory 20. Accordingly, the receiver can compare the checksum from the transmitter with a checksum generated from its own fixed keys to check that its fixed keys match the fixed keys of the transmitter. The checksum could also be used to determine errors in transmission.
- the program key message segment PKMS and the modification key message segment MKMS give the receiver the information it requires to decrypt the encrypted program data in the received signal.
- FIG 2 shows the first encryption engine 14 in additional detail. As shown in Figures 1 and 2 , the first encryption engine 14 is coupled between the PID filter 10 and the output multiplexer 16.
- the first encryption engine 14 has three sections 14A, 14B, and 14C.
- the section 14A includes a de-multiplexer 30, memories 32 and 34, and a multiplexer 36.
- the section 14B includes a RAM delay 38, an encryption block 40, and a multiplexer 42.
- the section 14C includes a de-multiplexer 44, memories 46 and 48, and a multiplexer 50.
- the PID filter 10 passes transport packets in the MPEG transport stream to the de-multiplexer 30.
- the transport packets are de-multiplexed and are stored in the memories 32 and 34 that operate in a ping-pong fashion.
- the transport packets in the memories 32 and 34 are supplied to the multiplexer 36.
- the multiplexer 36 passes all packets from the memories 32 and 34 to both the RAM delay 38 and the encryption block 40. These packets include program packets, null packets, and such non-program packets as PIDs, PSIPs, PMTs, and PATs.
- the encryption block 40 uses the dynamically generated program keys PK to encrypt all packets that it receives and supplies the encrypted packets to the multiplexer 42. In response to an encrypt flag from the PID filter 10, the multiplexer 42 selects only the encrypted packets from the Encryption block 40 which correspond to the selected program or programs that are to be encrypted. It will be understood that the MPEG transport stream may contain one or more programs and that any one or more of these programs may be flagged for Encryption.
- All other packets are selected by the multiplexer 42 from the RAM delay 38.
- the output of the multiplexer 42 is the input PEG transport stream except that the packets corresponding to the selected program are encrypted.
- the multiplexer 42 passes the encrypted and non-encrypted packets to the de-multiplexer 44.
- the packets that the multiplexer 42 selects from the RAM delay 38 are the PSI (Program Specific Information) packets such as PSIP (Program and System Information Protocol) packets, PAT (Program Association Table) packets, PMT (Program Map Table) packets, and/or packets containing adaptation fields.
- PSI Program Specific Information
- the non-encrypted packets that are output by the multiplexer 42 include PSI packets.
- the PSI packets contain information that assists the receiver in determining which channel and which portions of the transport stream contain the program selected by the user. If the PSI packets were encrypted, the receiver might not be able to locate the user selected programs for decryption.
- the encrypted and non-encrypted packets from the de-multiplexer 44 are stored in the memories 46 and 48 that operate in a ping-pong fashion.
- the encrypted and non-encrypted packets in the memories 46 and 48 are supplied through the multiplexer 50 to the output multiplexer 16.
- the sections 14A and 14C of the first encryption engine 14 are controlled so as to maintain proper timing, data flow rates, and synchronization.
- FIG. 3 shows a dynamic program key generator portion 12A of the dynamic program key and modification key generator 12 in more detail.
- the dynamic program key generator portion 12A includes a seed generator 60 that supplies a seed to a random number generator 62.
- the seed generator 60 can select, on any desired basis, the seed from any portion of the MPEG transport stream 61, such as video and/or audio, in one or more program data packets.
- a de-multiplexer 64 selects four 128 bit random numbers from the random number generator 62 and stores these four 128 bit random numbers as four dynamically generated program keys in a next portion of a memory 66 while the encryption block 40 uses the four dynamically generated program keys previously stored in an active portion of the memory 66 to encrypt program data.
- the de-multiplexer 64 selects another four 128 bit random numbers from the random number generator 62 and stores these additional four 128 bit random numbers as four dynamically generated program keys PK in the next portion of the memory 66.
- a multiplexer 68 supplies the four dynamic program keys from the active portion of the memory 66 to a key expander 70 such as that shown in Figure 4 , As needed, the key expander 70 expands each of the dynamic program keys PK from 128 bit keys to, for example, 1408 bit expanded keys.
- the expanded dynamic program keys PK are supplied to the encryption block 40 of Figure 2 .
- the key expander 70 as shown in Figure 4 includes an inverse key block. This inverse key block is enabled during program encryption and is disabled during encryption of the program key message segment PKMS and the modification key message segment MKMS.
- the time between message segments can be made dependent upon the availability of null packets in the incoming MPEG transport stream because message segments are transmitted in place of selected null packets.
- the PID filter 10 detects the null packet and signals output multiplexer 16 to pass a message segment instead of packets from the multiplexer 50.
- a fixed key selector 80 uses random numbers generated by the random number generator 62 in order to address the memory 20 so as to select fixed keys from the memory 20.
- each fixed key stored in the memory 20 may be 128 bits, and four 32 bit address words may be used to read each fixed key from the memory 20.
- These fixed keys are used to encrypt the program keys and modification keys (described in more detail hereinafter) that are sent to the receiver and that are required by the receiver to decrypt the received encrypted program data.
- three fixed keys are selected from the memory 20 by the fixed key selector 80 and are stored as fixed keys K A in a fixed key memory 82.
- Three more fixed keys are selected from the memory 20 by the fixed key selector 80 and are stored as fixed keys K B in a fixed key memory 84.
- each of these three fixed keys K A and three fixed keys K B may be 128 bits in length.
- the three fixed keys K A stored in the fixed key memory 82 and the three fixed keys K B stored in the fixed key memory 84 are selected on the basis of random addresses from the random number generator 62.
- three Hash values A, B, and C are selected by the fixed key selector 80 and are stored in a message segment key and hash value memory 86.
- the three Hash values A, B, and C are also selected on the basis of random addresses from the random number generator 62.
- each of the three Hash values A, B, and C may be 64 bits or 1/2 of a fixed key.
- three random numbers from the random number generator 62 are stored in a modification key memory 88 as modification keys K M .
- Each of the modification keys for example, may be 128 bits in length.
- a message segment key generator 90 which is shown in more detail in Figure 6 , includes latches 92 1 , 92 2 , and 92 3 and a 96 x 32 look up table 94.
- the latch 92 1 latches the first 32 bits of a first of the three fixed keys K A stored in the fixed key memory 82
- the latch 92 2 latches the first 32 bits of a first of the three fixed keys K B stored in the fixed key memory 84
- the latch 92 3 latches the first 32 bits of a first of the three modification keys K M stored in the modification key memory 88.
- These 96 latched bits form a 96 bit address that reads out the first 32 bits of a first message segment key for storage in the message segment key and hash value memory 86.
- Figure 6 also shows, in simplified form, four of the look up tables that are stored in the look up table 94.
- One of the tables is selected to provide the three message segment keys that are stored in the message segment key and hash value memory 86.
- the simplified form of table 0 in Figure 6 shows the relationship between the address and the bits that are stored in table 0. Thus, if the first K M bit of an address is 0 and the first K A bit of an address is 0 and the first K B bit of an address is 0, table 0 will read out a 0 bit for the first bit K 0 of a message segment key.
- table 0 will instead read out a 1 bit for the first bit K 0 of a message segment key. If the next K M bit of an address is 0 and the next K A bit of an address is 0 and the next K B bit of an address is 0, table 0 will read out a 0 bit for the next bit K 0 of the message segment key. However, if the next K M bit of an address is 0 and the next K A bit of an address is 1 and the next K B bit of an address is 0, table 0 will instead read out a 1 bit for the next bit K 0 of a message segment key.
- the bits that are stored in the tables may have any desired relationship to their addresses.
- the relationship may be a random, OR, XOR, AND, NAND, NOT, MUX, ones complement, twos complement, or gray scale relationship, and each table may bear a different relationship between the address and the stored bits.
- the latch 92 1 latches the second 32 bits of the first of the three fixed keys K A stored in the fixed key memory 82
- the latch 92 2 latches the second 32 bits of the first of the three fixed keys K B stored in the fixed key memory 84
- the latch 92 3 latches the second 32 bits of the first of the three modification keys K M stored in the modification key memory 88.
- These 96 latched bits form a second 96 bit address that reads out the second 32 bits of the first message segment key for storage in the message segment key and hash value memory 86.
- the third and fourth 32 bits of the first of the three fixed keys K A stored in the fixed key memory 82, of the first of the three fixed keys K B stored in the fixed key memory 84, and of the first of the three modification keys K M stored in the modification key memory 88 are used to read out the third and fourth 32 bits of the first message segment key from the look up table 94.
- These third and fourth 32 bits of the first message segment key are also stored in the message segment key and hash value memory 86 to form all 128 bits of the first message segment key.
- the second and third message segment keys are similarly read out of the look up table 94 and stored in the message segment key and hash value memory 86.
- These three message segment keys are used to encrypt the program keys.
- Three other message segment keys are used to encrypt a set of modification keys as explained in more detail below.
- a multiplexer 96 appropriately multiplexes the four next dynamically generated program keys PK from the memory 66, a key control 98, the modification keys from the modification key memory 88, the checksum from the memory 20, and a modifier message MM from a modifier message memory 99 to cremate the program key message segment PKMS and the modification key message segment MKMS that are discussed more fully below.
- the modifier message MM contains a 64-bit initial value and a 192 bit control. The use of the initial value is described below.
- the control bits of the modifier message MM comprise, for example, four bytes for system control, nine bytes for address pointers that point to memory addresses for the fixed keys and Hash values, and eleven bytes that can be used for any purpose.
- the address pointers discussed above point to the addresses in the memory 20 corresponding to (i) the six fixed keys that are stored in the fixed key memories 82 and 84 and that, in selected combinations, are used by the message segment key generator 90 to generate the message segment keys A, B, and C stored in the message segment key and hash value memory 86 and (ii) the hash values A, B, and C that are also stored in the message segment key and hash value memory 86.
- These address pointers are sent in the modifier message MM to the receiver so that the receiver can re-generate the message segment keys A, B, and C and corresponding hash values A, B, and C that are required to decrypt the program keys and modification keys, as explained below.
- bits 0 and 1 are used to designate the copy control assigned to the program data.
- Bits 2-7 are reserved except that at least one of these reserved bits is set to one value to indicate that the corresponding message segment is a modification key message segment MKMS and is set to another value to indicate that the corresponding message segment is a program key message segment PKMS.
- the bits K M provided to the look up table 94 are set to a predetermined value such as all zeros while the three message segment keys are being produced for storage in the message segment key and hash value memory 86.
- the message segment keys that are used to encrypt the modification key message segment MKMS are produced with modification keys having a predetermined value known to both the transmitter and the receiver.
- the look up table 94 may pass only the fixed keys K A as the message segment keys.
- the look up table 94 could instead pass only the fixed keys K B as the message segment keys, or the look up table 94 could read out message segment keys on the basis of both the fixed keys K A and K B from the fixed key memories 82 and 84. These alternatives are based on which of the tables in look up table 94 is selected as indicated by bits 8-11 of the system control of the modifier message MM as discussed below.
- the message segment keys produced with these modification keys having the predetermined value are used to encrypt the modification key messages MK1, MK2, and MK3 and the checksum-message CRC.
- the bits K M , provided to the look up table 94 are the randomly generated modification keys stored in the modification key memory 88, and these randomly generated modification keys are used along with the fixed keys K A and K B to produce the three message segment keys stored in the message segment key and hash value memory 86.
- the message segment keys that are used to encrypt the program key message segment PKMS are produced with the randomly generated modification keys stored in the modification key memory 88 in, addition to the fixed keys K A and K B from the fixed key memories 82 and 84.
- the message segment keys produced with the randomly generated modification keys stored in the modification key memory 88 are used to encrypt the program key messages PK1, PK2, PK3, and PK4.
- the fixed keys used to generate the message segment keys that encrypt the program key message segment PKMS may be the same as or different from the fixed keys used to generate the message segment keys that encrypt the modification key message segment MKMS.
- Bits 8, 9, 10, and 11 designate which one of the sixteen possible tables stored in the look up table 94 is used to produce the message segment keys stored in the message segment key and hash value memory 86.
- Bits 12-15 may be used for any purpose such as indicating to the receiver a particular program key rotation, as discussed below.
- Bits 16-31 are a checksum produced by a CRC generator of the modifier message memory 99.
- the CRC generator of the modifier message memory 99 applies a CRC code to bits 0-15 of the system control byte shown in Figure 9 in order to generate a checksum.
- This checksum comprises bits 16-31 as shown in Figure 9 .
- the CRC generator appends this checksum to the unmodified bits 0-15 to form the full system control of the modifier message MM.
- This full system control of the modifier message MM is used by the receiver to determine if the program key message segment PKMS and/or the modification key message segment MKMS is not properly received due, for example, to noise in the channel and is described in more detail below,
- a multiplexer 100 receives the message segment keys and hash values stored in the message segment key and hash value memory 86.
- the multiplexer 100 also receives three fixed keys A', B', and C' and three Hash values A', B', and C' stored in a memory 102.
- the three fixed keys A', B', and C' stored in the memory 102 each comprises a 128 bit fixed key
- the three Hash values A', B', and C' stored in the memory 102 each comprises a 64 bit Hash values.
- the multiplexers 96 and 100 operate in conjunction with the second encryption engine 18 to encrypt the encrypted portion of the message segments MS shown in Figure 10 .
- the encrypted portion of the message segment MS shown in Figure 10 includes the modifier message MM, and four program key messages KM1, KM2, KM3, and KM4.
- the encrypted portion of the message segment MS shown in Figure 10 includes the modifier message MM, the three modification key messages MK1, MK2, and MK3, and the fixed key checksum CRC.
- the modifier messages MM include the initial value and the 192 bit control as shown in Figures 7 and 8 .
- the initial value for example, may include 64 predetermined arbitrary bits.
- the multiplexer 100 passes the three fixed keys A', B', and C' and the three Hash values A', B', and C' from the memory 102 through a key expander 104 to the second encryption engine 18.
- the key expander 104 may be similar to the key expander 70 and expands only the fixed keys A', B', and C'.
- the key expander 104 does not expand the Hash values A', B', and C'.
- the multiplexer 96 passes the modifier message MM to the second encryption engine 18.
- the second encryption engine 18 is shown in more detail in Figure 11 .
- the Hash value A' is applied to an EXCLUSIVE OR 106
- the Hash value B' is applied to an EXCLUSIVE OR 108
- the Hash value C' is applied to an EXCLUSIVE OR 110.
- the EXCLUSIVE ORs 106, 108, and 110 bit-wise process their respective inputs.
- the expanded fixed key A' is applied to an AES encrypter 112
- the expanded fixed key B' is applied to an AES encrypted 114
- the expanded fixed key C' is applied to an AES encrypter 116.
- the initial value of the modifier message MM is applied to the EXCLUSIVE OR 106, a first 1/3 of the control bits of the modifier message MM is applied to the AES encrypter 112, a second 1/3 of the control bits of the modifier message MM is applied to the AES encrypter 114, and a third 1/3 of the control bits of the modifier message MM is applied to the AES encrypter 116,
- the AES encrypter 112 encrypts an output of the EXCLUSIVE OR 106 and the first 1/3 of the control, bits of the modifier message MM according to the expanded fixed key A', and supplies half of the encryption result to the EXCLUSIVE OR 108 and the other half as the second 1/4 of the encrypted modifier message MM.
- the AES encrypter 114 encrypts an output of the EXCLUSIVE OR 108 and the second 1/3 of the control bits of the modifier message MM according to the expanded fixed key B', and supplies half of the encryption result to the EXCLUSIVE OR 110 and the other half as the third 1/4 of the encrypted, modifier message MM.
- the AES encrypter 116 encrypts an output of the EXCLUSIVE OR 110 and the third 1/3 of the control bits of the modifier message MM according to the expanded fixed key C', and supplies half of the encryption result as the first 1/4 of the encrypted modifier messages MM and the other half as the fourth 1/4 of the encrypted modifier message MM.
- a program key message KM1 includes a 64-bit initial value, which may be same initial value as discussed above or a different initial value, a 64-bit key control 98, and one of the 128-bit program keys divided into two 64-bit portions.
- the program key messages KM2, KM3, and KM4 containing the other three program keys are similarly constructed.
- the key control 98 is used to designate whether the key message contains a program key, a modification key, or the checksum.
- the multiplexer 100 passes the three message segment keys A, B, and C and the three Hash values A, B, and C from the message segment key and hash value memory 86 through the key expander 104 to the second encryption engine 18.
- the three message segment keys A, B, and C that are used to encrypt the program key messages are the message segment keys read out of the table 94 by use of the randomly generated modification keys K M stored in the modification key memory 88, the fixed keys K A from the fixed key memory 82, and the fixed keys K B from the fixed key memory 84.
- the key expander 104 expands only the message segment keys A, B, and C.
- the key expander 104 does not expand the Hash values A, B, and C.
- the multiplexer 96 passes the first of the four dynamically generated program keys from the next portion of the-memory 66 to the second encryption engine 18.
- the Hash value A is applied to the EXCLUSIVE OR 106
- the Hash value B is applied to the EXCLUSIVE OR 108
- the Hash value C is applied to the EXCLUSIVE OR 110.
- the expanded message segment key A is applied to the AES encrypter 112
- the expanded message segment key B is applied to the AES encrypter 114
- the expanded message segment key C is applied to the AES encrypter 116.
- the initial value is applied to the EXCLUSIVE OR 106, the control word is applied to the AES encrypter 112, a first 1/2 of the first of the four dynamically generated program keys is applied to the AES encrypter 114, and a second half of the first of the four dynamically generated program keys is applied to the AES encrypted 116.
- the AES encrypter 112 encrypts an output of the EXCLUSIVE OR 106 and the control word according to the expanded message segment key A, and supplies half of the encryption result to the EXCLUSIVE OR 108 and the other half as the second 1/4 of the program key message ICM1.
- the AES encrypter 114 encrypts an output of the EXCLUSIVE OR 108 and the first 1/2 of the first of the four dynamically generated program keys according to the expanded message segment key B, and supplies half of the encryption result to the EXCLUSIVE OR 110 and the other half as the third 1/4 of the program key message KM1.
- the AES encrypter 116 encrypts an output of the EXCLUSIVE OR 110 and the second 1/2 of the first of the four dynamically generated program keys according to the expanded message segment key C, and supplies half of the encryption result as the first 1/4 of the program key message KM1 and the other half as the fourth 1/4 of the program key message KM1.
- the other three program key messages KM2, KM3, and KM4 are similarly generated.
- Each modification key message in the modification key message segment MKMS also has the example construction of Figure 12 .
- a modification key message MK1 includes a 64-bit initial value, which may be same initial value as discussed above or a different initial value, a 64-bit key control 98, and one of the 128-bit modification keys divided into two 64-bit portions.
- the modification key messages MK2 and MK3 containing the other two modification keys are similarly constructed.
- the key control 98 is used to designate whether the key message contains a program key, a modification key, or the checksum
- the multiplexer 100 In order to encrypt the modification key message MK1, the multiplexer 100 passes the three message segment keys A, B, and C and the three Hash values A, B, and C from the message segment key and hash value memory 86 through the key expander 104 to the second encryption engine 18.
- the three message segment keys A, B, and C that are used to encrypt the modification key messages are the message segment keys read out of the table 94 by use of the modification keys with the predetermined value.
- the fixed keys K A from the fixed key memory 82 may be read out of the table 94 as the message segment keys.
- the fixed keys K B from the fixed key memory 84 can be read out of the table 94 as the message segments keys or a combination of the fixed keys K B and K B can be used to read out the message segment keys from the table 94.
- the key expander 104 expands only the message segment keys A, B, and C.
- the key expander 104 does not expand the Hash values A, B, and C.
- the multiplexer 96 passes the first of the modification keys from the modification key memory 88 to the second encryption engine 18.
- the Hash values A, B, and C are applied to the EXCLUSIVE ORs 106, 108, and 110 as before. Also, the expanded message segment keys A, B, and C are applied to the AES encrypters 112, 114, and 116 as before .
- the initial value is applied to the EXCLUSIVE OR 106, the control word is applied to the AES encrypter 112, a first 1/2 of the first of the three modification keys is applied to the AES encrypter 114, and a second half of the first of the three modification keys is applied to the AES encrypter 116.
- the AES encrypter 112 supplies half of its encryption result to the EXCLUSIVE OR 108 and the other half as the second 1/4 of the modification key message MK1.
- the AES encrypter 114 supplies half of its encryption result to the EXCLUSIVE OR 110 and the other half as the third 1/4 of the modification key message MK1.
- the AES encrypter 116 supplies half of its encryption result as the first 1/4 of the modification key message MK1 and the other half as the fourth 1/4 of the modification key message MK1,
- the output multiplexer 16 of Figure 1 muxes the encrypted program data, the MPEG PID header from the transport stream, 192 clock bits which may be supplies by a separate generator and which may be the SMPTE time code (if any), and 20 forward error correction bytes from the transport stream with the encrypted program key message segment PKMS and the encrypted modification key message segment MKMS to form the encrypted transport stream.
- Each of the program key message segment PKMS and the modification key message segment MKMS is contained in a corresponding complete ATSC data segment.
- the second encryption engine 18 generates the message segments MS in pairs, i.e., the program key message segment PKMS and the modification key message segment MKMS .
- This pair of message segments MS is shown in Figure 13 .
- the modifier message MM in each message segment MS is provided in accordance with Figures 8 and 9 .
- the first message segment shown in Figure 13 is the modification key message segment MKMS and contain an encrypted form of the three modification keys stored in the modification key memory 88 and the checksum (CRC) from the memory 20.
- the second message segment shown in Figure 13 is the program key message segment PKMS and contains an encrypted form of the four encrypted new program keys to be applied by the receiver to decrypt the encrypted program data.
- the modifier message MM and the four program key messages KM1, KM2, KM3, and KM4 of the program key message segment PKMS are encrypted.
- the modifier message MM, the three modification key messages MK1, MK2, and MK3, and the checksum message CRC of the modification key message segment MKMS are encrypted,
- the four byte header of the message segment MS shown in Figure 10 is the MPEG PID.
- the modifier message MM includes the message control bytes shown in Figure 9 . This control byte identifies the message segment MS in a pair either as the program key message segment PKMS or as the modification key message segment MKMS, as explained above.
- Figure 14 shows the relative message pair transmission and reception timing upon which key synchronization is determined.
- event 1 which may be a null packet in the MPEG transport stream
- PKMS program key message segment
- the receiver receives this program key message segment PKMS, decrypts it, and stores the program keys that were contained in the program key message segment PKMS as next program keys. However, the receiver does not start using these next program keys yet.
- the encryption encoder 8 of the transmitter After the transmitter transmits the program key message segment PKMS, the encryption encoder 8 of the transmitter makes the three modification keys and the modifier message MM, and encrypts the modifier message MM and the three modification keys using the message segment keys and the Hash values as described above. The encryption encoder 8 then assembles the modification key message segment MKMS containing the encrypted modifier message MM and the three modification keys as described above.
- event 2 the transmitter transmits the modification key message segment MKMS in place of the null packet and, at the same time, the encryption encoder 8 begins using the next program keys stored in the memory 66 as the active program keys to encrypt program data. Thus, the next program keys become the active program keys.
- the receiver receives this modification key message segment MKMS and immediately begins using its previously stored next program keys as the active program keys to decrypt program content. Accordingly, the replacement of the active program keys with the next program keys is made at the same time in the transmitter and receiver so that the transmitter and receiver use the same program keys to encrypt and decrypt the same program content.
- the encryption encoder 8 of the transmitter After the transmitter transits the modification key message segment MKMS and switches program keys, the encryption encoder 8 of the transmitter makes new program keys, and saves the new program keys in the memory 66 as the next program keys.
- the encryption encoder 8 encrypts the new program keys and assembles another program key message segment PKMS containing the new program keys and waits for an opportunity (event 3 such as a null packet) to transmit this program key message segment PKMS.
- the encryption encoder 8 of the transmitter makes new program keys, saves the new program keys, and assembles the next program key message segment PKMS
- the receiver decrypts the modification key message segment MKMS that it has just received, and saves the modifier message MM and the modification keys contained in this message.
- the encryption encoder 8 is using the active program keys to encrypt program data and is transmitting the encrypted program data to the receiver.
- the receiver is using the active program keys to decrypt program data.
- null packets are occurring with an undesirably high frequency. For example, during periods where there is little action in the video, many null packets can occur during a single frame. Therefore, it may be desirable to add a delay function such that message transmission and key switching does not occur more often than a predetermined frequency. For example, this delay function may be set so that message transmission and key switching does not occur more often than once per two or three ATSC frames.
- each program data segment of a field to be transmitted to the receiver includes a non-encrypted four byte MPEG header that identifies the segment as a program data segment, eleven blocks each containing encrypted 128 bits of program data, eight bytes of non-encrypted program data, and twenty bytes of non-encrypted forward error correction data.
- the four active program keys A, B, C, and D are applied in the following order to the eleven blocks of data in the first program data segment: A, B, C, D, A, B, C, D, A, B, C. Accordingly, the active program key A is applied to the first of the eleven blocks of data to be encrypted, the active program key B is applied to the second of the eleven blocks of data to be encrypted, ..., and the active program key C is applied to the eleventh of the eleven blocks of data to be encrypted.
- This same rotation scheme ABCDABCDABC can be used for the next and subsequent program data segments of a field.
- the next program data segment can continue the rogation.
- the active program keys A, B, C, and D are applied in the following order to the eleven blocks of data to be encrypted in the second program data segment: D, A, B, C, D, A, B, C, D, A, B.
- the active program key D is applied to the first of the eleven blocks of data to be encrypted
- the active program key A is applied to the second of the eleven blocks of data to be encrypted
- ... and the active program key B is applied to the eleventh of the eleven blocks of data to be encrypted.
- the rotation can then be continued for subsequent program data segments as indicated by Figure 15 .
- Bits 12-15 of the system control byte shown in Figure 9 can be used to indicate to the receiver the particular rotation being used in the transmitter.
- the output multiplexer 16 transmits encrypted program data segments continuously until an opportunity (event) arises for transmitting a message segment MS (either a program key message segment PKMS or a modification key message segment MKMS).
- a message segment MS either a program key message segment PKMS or a modification key message segment MKMS.
- the occurrence of a null packet gives rise to the opportunity for transmitting one of these message segments, the occurrence of the next null packet gives rise to the opportunity for transmitting the other of the message segments MS in the pair, and so on.
- An objective may be established for transmitting a message segment MS on a periodic basis dependent upon the occurrence of a null packet. For example, the objective may be to transmit a message segment MS no more often than once per field of 312 segments.
- the decryption decoder 180 includes a PID filter 182 that, based on PID numbers, detects and forwards encrypted program data to a first decryption engine 184 and detects and forwards program key message segments PKMS and modification key message segments MKMS to a second decryption engine 186.
- the first decryption engine 184 performs a single wrap decryption process which is complementary to the single wrap encryption process performed by the first encryption engine 14.
- the second decryption engine 186 decrypts (unwraps) this message segment in order to recover the modification keys and the fixed key and hash value addresses of a memory 188.
- a fixed key selector and message segment key generator 190 uses these fixed key and hash value addresses to retrieve fixed keys and hash values from the memory 188.
- the fixed key selector and message segment key generator 190 uses the fixes keys and hash values retrieved from the memory 188 along with the a prior known modification keys, i.e., the modification keys having the known predetermined value, in order to regenerate the message segment keys that were used in the encryption encoder 8 to encrypt the modification keys and the checksum message CRC and that are required by the decryption decoder 180 to decrypt the encrypted modification keys and the checksum message CRC.
- the fixed key selector and message segment key generator 190 uses the fixed keys and hash values retrieved from the memory 188 based on the memory addresses contained in the modifier message of the program key message segment PKMS along with the decrypted modification keys in order to regenerate the message segment keys that were used in the encryption encoder 8 to encrypt the program keys and that are required by the decryption decoder 180 to decrypt the encrypted program key messages KM1, KM2, KM3, and KM4.
- the second decryption engine 186 decrypts program keys in the message segment MS using the message segment keys from the fixed key selector and message segment key generator 190 and stores the decrypted program keys in the next portion of a memory 192.
- the first decryption engine 184 uses the active program keys stored in the memory 192 to decrypt the encrypted data from the program data segments of the field being received.
- the first decryption engine 184 includes three sections 184A, 184B, and 184C.
- the section 184A includes a de-multiplexer 200, memories 202 and 204, and a multiplexer 206.
- the section 184B includes a memory 208, a decryption block 210, and a multiplexer 212.
- the section 184C includes a de-multiplexer 214, memories 216 and 218, and a multiplexer 220.
- the sections 184A, 184B, and 184C are controlled by the PID filter 182.
- the PID filter 182 passes all packets in the MPEG transport stream to the de-multiplexer 200. All packets are de-multiplexed and are stored in the memories 202 and 204 that operate in a ping-pong fashion. All packets in the memories 202 and 204 are supplied to the multiplexer 206.
- the multiplexer 206 passes all packets from the memories 202 and 204 to the memory 208 and to the decryption block 210. These packets include program packets (one or more of which may be encrypted), message segments, and such non-program packets as PIDs, PSIPs, PMTs, and PATS.
- the decryption block 210 uses the decrypted program keys PK to decrypt all packets that it receives and supplies the decrypted packets to the multiplexer 212.
- the multiplexer 212 in response to a decryption flag from the PID filter 182, selects only the decrypted packets from the decryption block 210 which correspond to the selected program or programs that were to be decrypted.
- All other packets are selected by the multiplexer 212 from the memory 208.
- the output of the multiplexer 212 is the original MPEG transport stream less null packets and including messages segments.
- the multiplexer 212 passes the decrypted and non-encrypted packets to the de-multiplexer 214.
- the decrypted and non-encrypted packets from the de-multiplexer 214 are stored in the memories 216 and 218 that operate in a ping-pong fashion.
- the decrypted and non-encrypted packets in the memories 216 and 218 are supplied through the multiplexer 220 to a null inserter 222.
- the null inserter 222 is controlled by the PID filter 182 to remove the program key message segments PKMS and the modification key message segments MKMS from the transport stream, and to insert null packets back into the transport stream in place of the removed program key message segments PKMS and the removed modification key message segments MKMS.
- the output of the null inserter is the decrypted MPEG transport stream,
- the sections 184A and 184C of the first decryption engine 184 are controlled by the message packets so as to maintain proper timing, data flow rates, and synchronization.
- the fixed key selector and message segment key generator 190 is shown in more detail in Figure 19 .
- the program key message segments PKMS and the modification key message segments MKMS are supplied to the second decryption engine 186. Each of these message segments has the form shown in Figure 10 .
- the modifier message MM in the received message segment is decrypted using the three fixed keys A', B', and C' and the three Hash values A', B', and C' which are stored in a memory 230.
- the three fixed keys A', B', and C' and the three Hash values A' , B', and C' stored in memory 230 are the same fixed keys and Hash values that are stored in the memory 102.
- the decrypted modifier message MM indicates to the receiver, inter alia, whether the corresponding message segment is a program-key message segment PKMS or a modification key message segment MKMS, If the corresponding message segment is a program key message segment PKMS, the receiver knows to use the decrypted modification keys K M as well as the fixed keys K A and K B to produce that the message segment keys that are required for decryption of the program key messages. If the corresponding message segment is a modification key message segment MKMS, the receiver knows to use the known modification keys having the predetermined value in order to read out the fixed keys K A , K B , or some combination of K A and K B as the message segment keys that are required for decryption of the modification key messages and the checksum message CRC.
- a multiplexer 232 In order to decrypt the modifier message MM in a received one of the modification key message segments MKMS or the program key message segments PKMS, a multiplexer 232 passes the three fixed keys A', B', and C' and the three Hash values A', B', and C' from the memory 230 through a key expanded 234 to the second encryption engine 186.
- the key expander 234, for example, may be similar to the key expander 104 and expands only the fixed keys A', B', and C'. The key expander 234 does not expand the Hash values A', B', and C'.
- the second encryption engine 186 which performs an operation complementary to that performed by the encryption engine 18 is shown in more detail in Figure 20 .
- the Hash value C' is applied to an EXCLUSIVE OR 236, the Hash value B' is applied to an EXCLUSIVE OR 238, and the Hash value A' is applied to an EXCLUSIVE For 240.
- the EXCLUSIVE ORs 236, 238, and 240 bit-wise process their respective input.
- the expanded fixed key C' is applied to an AES decrypter 242
- the expanded fixed key B' is applied to an AES decrypter 244
- the expanded fixed key A' is applied to an AES decrypter 246.
- the first 1/4 of the encrypted modifier message MM is applied to the AES decrypter 242
- the second 1/4 of the encrypted modifier message MM is applied to the AES decrypter 246
- the third 1/4 of the encrypted modifier message MM is applied to the AES decrypter 244
- the fourth 1/4 of the encrypted modifier message MM is applied to the AES decrypter 242.
- the AES decrypter 242 decrypts the first 1/4 and the fourth 1/4 of the encrypted modifier message MM according to the expanded fixed key C', and supplies half of the decryption result to the EXCLUSIVE OR 236 and the other half as the third 1/3 of the control bits of the decrypted modifier message MM.
- the AES decrypter 244 decrypt an output of the EXCLUSIVE OR 236 and the third 1/4 of the encrypted modifier message MM according to the expanded fixed key B', and supplies half of the decryption result to the EXCLUSIVE OR 238 and the other half as the second 1/3 of the control bits of the decrypted modifier message MM.
- the AES encrypter 246 decrypts an output of the EXCLUSIVE OR 238 and the second 1/4 of the encrypted modifier message MM according to the expanded fixed key A', and supplies half of the encryption result to the EXCLUSIVE OR 240 and the other half as the first 1/3 of the decrypted modifier message MM.
- the output of the EXCLUSIVE OR 240 is the initial value of the modifier message MM. If this initial value is not the same initial value that was used during encryption of the modifier message MM, then the encryption/decryption process has an error that indicates erroneous message decryption.
- a multiplexer 250 applies the control bits of the decrypted modifier message MM to a modifier message decodes 252.
- the multiplexer 232 After decryption of the modifier message MM, the multiplexer 232 passes the three message segment keys A, B, and C and the three hash values A, B, and C stored in a message segment key memory 254 to the key expander 234.
- these three message segment keys are produced with the modification keys having the predetermined values.
- the key expander expands only the three message segment keys A, B, and C, it does not expand the three hash values A, B, and C.
- the three expanded message segment keys A, B, and C and the three hash values A, B, and C are used by the second decryption engine 186 to decrypt the modification key message MK1 in the received modification key message segment MKMS.
- each of the three modification key messages MK1, MK2, and MK3 and the checksum message CRC has the format shown in Figure 12 , and the control of each of the messages is the key control 98 that indicates whether the particular message is a program key message, a modification key message, or a checksum message.
- the Hash value C is applied to the EXCLUSIVE OR 236, the Hash value B is applied to the EXCLUSIVE OR 238, and the Hash value A is applied to the EXCLUSIVE OR 240.
- the expanded fixed key C is applied to the AES decrypter 242, the expanded fixed key B is applied to the AES decrypter 244, and the expanded fixed key A is applied to the AES decrypter 246.
- the first 1/4 of the encrypted modification key message MK1 is applied to the AES decrypter 242
- the second 1/4 of the encrypted modification key message MK1 is applied to the AES decrypter 246
- the third 1/4 of the encrypted modification key message MK1 is applied to the AES decrypter 244
- the fourth 1/4 of the encrypted modification key message MK1 is applied to the AES decrypted 242.
- the AES decrypter 242 supplies half of its decryption result to the EXCLUSIVE OR 236 and the other half as the second 1/2 of the decrypted modification key MK1.
- the AES decrypter 244 supplies half of its decryption result to the EXCLUSIVE OR 238 and the other half as the first 1/2 of the decrypted modification key.
- the AES encrypter 246 supplies half of its encryption result to the EXCLUSIVE OR 240 and the other half as the control of the decrypted modification key.
- the output of the EXCLUSIVE OR 240 is the initial value of the modification key message. If this initial value is not the same initial value that was used during encryption of the modification key MK1, then the encryption/decryption process has an error that indicates the need for remedial action.
- the decryption engine 186 similarly decrypts the modification key messages MK2 and MK3 and the checksum message CRC.
- the multiplexer 250 passes the controls and the checksum as indicated in Figure 19 , and passes the modification keys for storage in a modification key memory 256.
- the fixed key selector and message segment key generator 190 can begin generating new message segment keys that will be used to decrypt the programs keys from the next received program key message segment PKMS.
- the modifier message decoder 252 decodes the received and decrypted modifier message MM in each of the message segments to determine the addresses according to the modifier message format and definition shown in Figures 8 and 9 .
- the fixed key selector 260 uses these addresses to select, from the memory 188, the same three K A keys, the same three K B fixed keys, and the same three Hash values A, B, and C that were used to produce the message segment keys A, B, and C that were used to encrypt the message segments PKMS and MKMS in the encryption encoder 8.
- a first key memory 262 stores the selected three K A keys
- a second fixed key memory 264 stores the selected three fixed K B keys
- the message segment key memory 254 stores the selected three Hash values A, B, and C.
- a message segment key generator 266 may have the same construction as the message segment key generator 90 shown in Figure 6 . Accordingly, the latch 92 1 latches the first 32 bits of a first of the three fixed keys K A stored in the fixed key memory 262, the latch 92 2 latches the first 32 bits of a first of the three fixed keys K B stored in the fixed key memory 264, and the latch 92 3 latches the first 32 bits of a first of the three modification keys K M stored in the modification key memory 256 when message segment keys are being produced to decrypt program keys (otherwise, the modification keys having the predetermined value are used to generate message segment keys to decrypt modification keys). These 96 latched bits form a 96 bit address that reads out the first 32 bits of a first message segment key for storage in the message segment key memory 254.
- the same table that was selected in the transmitter is selected in the receiver to provide the three message segment keys that are stored in the message segment key memory 254.
- the latch 92 1 latches the second 32 bits of the first of the three fixed keys K A stored in the fixed key memory 262
- the latch 92 2 latches the second 32 bits of the first of the three fixed keys K B stored in the fixed key memory 264
- the latch 92 3 latches the second 32 bits of the first of the three modification keys K M stored in the modification key memory 256 when message segment keys are being produced to decrypt program keys (otherwise, the modification keys having the predetermined value are used to generate message segment keys to decrypt modification keys).
- These 96 latched bits form a second 96 bit address that reads out the second 32 bits of the first message segment key for storage in the message segment key memory 254.
- the third and fourth 32 bits of the first of the three fixed keys K A stored in the fixed key memory 262, of the first of the three fixed keys K B stored in the fixed key memory 264, and of the first of the three modification keys K M stored in the modification key memory 256 are used to read out the third and fourth 32 bits of the first message segment key from the look up table 94 when message segment keys are being produced to decrypt program keys (otherwise, the modification keys having the predetermined value are used to generate message segment keys to decrypt modification keys.
- These third and fourth 32 bits of the first message segment key are also stored in the message segment key memory 254 to form all 128 bits of the first message segment key.
- the second and third message segment keys are similarly read out of the look up table 94 and stored in the message segment key memory 254.
- the modifier message MM in the received message segment MS is decrypted as before using the fixed keys A', B', and C' and the Hash values A', B', and C' stored in the memory 230. Then, the multiplexer 232 passes the three message segment keys A, B, and C and the three Hash values A, B, and C from the message segment key memory 254 through the key expander 234 to the second encryption engine 186.
- the key expander 234 expands only the message segment keys A, B, and. C. The key expander 234 does not expand the Hash values A, B, and C.
- the Hash value C is applied to the EXCLUSIVE OR 236, the Hash value B is applied to the EXCLUSIVE OR 238, and the Hash value A is applied to the EXCLUSIVE OR 240.
- the expanded fixed key C is applied to the AES decrypter 242, the expanded fixed key B is applied to the AES decrypter 244, and the expanded fixed key A is applied to the AES decrypter 246.
- the first 1/4 of the encrypted first program key message KM1 is applied to the AES decrypter 242
- the second 1/4 of the encrypted first program key message KM1 is applied to the AES decrypter 246
- the third 1/4 of the encrypted first program key message KM1 is applied to the AES decrypter 244
- the fourth 1/4 of the encrypted first program key message KM1 is applied to the AES decrypter 242.
- the AES decrypter 242 decrypts the first 1/4 and the fourth 1/4 of the encrypted first program key message KM1 message according to the expanded fixed key C, and supplies half of the decryption result to the EXCLUSIVE OR 236 and the other half as the second 1/2 of the first program key of the decrypted first program key message KM1.
- the AES decrypter 244 decrypts an output of the EXCLUSIVE OR 236 and the third 1/4 of the encrypted first program key message KM1 according to the expanded fixed key B, and supplies half of the decryption result to the EXCLUSIVE OR 238 and the other half as the first 1/2 of the first program key of the decrypted first program key message KM1.
- the AES encrypter 246 decrypts an output of the EXCLUSIVE OR 238 and the second 1/4 of the encrypted first program key message KM1 according to the expanded fixed key A, and supplies half of the encryption result to the EXCLUSIVE OR 240 and the other half as the control of the decrypted first program key message KM1.
- the output of the EXCLUSIVE OR 240 is the initial value of the first program key message KM1. If this initial value is not the same initial value as was used during encryption of the first program key message KM1, then the encryption/decryption process has an error that indicates the need for remedial auction.
- the other three program key messages KM2, KM3, and KM4 are similarly decrypted.
- the multiplexer 250 of Figure 19 passes these four program keys to the next portion of the memory 192 and passes the control of each of the decrypted program key messages KM1, KM2, KM3, and KM4.
- a multiplexer 270 passes the active program keys, using the rotation discussed above in relation to Figures 15 and 16 , through a key expander 272 to the decryption block 210 so that the appropriate data can be decrypted.
- the key expander 272 may be constructed in accordance with Figure 4 .
- the key expander 272 also includes an inverse key block. This inverse key block is disabled during program decryption and is enabled during decryption of the program key message segment PKMS and the modification key message segment MKMS.
- the next program keys are received and stored in the next portion of the memory 192.
- the modifier message decoder 252 also decodes the full system control of the received and decrypted modifier message MM. As discussed above, the system control of the modifier message MM is shown in Figure 9 . Accordingly, the modifier message decoder 252 applies the same CRC code as the encoder to bits 0-15 of the system control of the modifier message MM in the received message segment PKMS or MKMS in order to recalculate the checksum bits 16-31. The receiver compares the recalculated checksum from bits 0-15 to the checksum bits 16-31 in the received system control. If the recalculated ckecksum from bits 0-15 and the received checksum bits 16-31 do not match, the received message segment is treated as the next message segment expected to be received in the sequence of received message segments.
- the modifier message decoder 252 uses the decoded bits 12-15 of the system control to determine the program key rotation that should be used by the decryption block 210 to decrypt the encrypted program packets as shown by the line extending from the modifier message decoder 252 to the control of the multiplexer 270 which selects the next active key to be used.
- the memories as described above may be ROMs, RAMs, non-volatile RAMs, and/or any other suitable memory devices.
- a 96 x 32 look up table 94 is used to produce the message segment keys. Accordingly, 96 address bits are used to read 32 bits of a message segment key.
- other look up tables and addressing schemes may be used to produce the message segment keys.
- a 384 x 128 look up table can be used to produce the message segment keys. Accordingly, 384 address bits comprising 128 K M bits, 128 K A bits, and 128 K B bits are used to read a 128 bit message segment key. Whichever look up table and addressing scheme is used in the transmitter, the same look up table and addressing scheme should be used in the receiver.
Landscapes
- Engineering & Computer Science (AREA)
- Signal Processing (AREA)
- Multimedia (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Databases & Information Systems (AREA)
- Theoretical Computer Science (AREA)
- Human Computer Interaction (AREA)
- Two-Way Televisions, Distribution Of Moving Picture Or The Like (AREA)
- Storage Device Security (AREA)
- Mobile Radio Communication Systems (AREA)
Claims (18)
- Un procédé de déchiffrement à triple bouclage pour le déchiffrement d'un message chiffré (PKMS, MKMS) en données déchiffrées possédant des première, deuxième, troisième et quatrième parties de données déchiffrées séquentielles, où le message chiffré possède des première, deuxième, troisième et quatrième parties chiffrées séquentielles, le procédé comprenant :la réception, à partir d'un émetteur (8), du message chiffré (PKMS, MKMS),le déchiffrement (en 242) conjointement des première et quatrième parties chiffrées selon une première clé de façon à produire des premières données déchiffrées intermédiaires et la quatrième partie de données déchiffrées, où une moitié du résultat de déchiffrement sont les premières données de déchiffrement intermédiaires et l'autre moitié est la quatrième partie de données déchiffrées, où la quatrième partie de données déchiffrées comprend un tiers d'un message déchiffré,le traitement (en 236) des premières données déchiffrées intermédiaires par un premier opérateur OU exclusif auquel une valeur de hachage en tant que deuxième clé est appliquée de façon à produire une première sortie d'opérateur,le déchiffrement (en 244) conjointement de la première sortie d'opérateur et de la troisième partie chiffrée selon une troisième clé de façon à produire des deuxièmes données déchiffrées intermédiaires et la troisième partie de données déchiffrées, où une moitié du résultat de déchiffrement sont les deuxièmes données de déchiffrement intermédiaires et l'autre moitié est la troisième partie de données déchiffrées, où la troisième partie de données déchiffrées comprend un tiers du message déchiffré,le traitement (en 238) des deuxièmes données déchiffrées intermédiaires par un deuxième opérateur OU exclusif auquel une valeur de hachage en tant que quatrième clé est appliquée de façon à produire un deuxième sortie d'opérateur,le déchiffrement (en 246) conjointement de la deuxième sortie d'opérateur et de la deuxième partie chiffrée selon une cinquième clé de façon à produire des troisièmes données déchiffrées intermédiaires et la deuxième partie de données déchiffrées, où une moitié du résultat de déchiffrement sont les troisièmes données de déchiffrement intermédiaires et l'autre moitié est la deuxième partie de données déchiffrées, où la deuxième partie de données déchiffrées comprend un tiers du message déchiffré, et,le traitement (en 240) des troisièmes données déchiffrées intermédiaires par un troisième opérateur OU exclusif auquel une valeur de hachage en tant que sixième clé est appliquée de façon à produire la première partie de données déchiffrées, où la première partie de données déchiffrées comprend une valeur initiale.
- Le procédé selon la Revendication 1 où la première partie de données déchiffrées comprend une valeur initiale (IV) destinée à une comparaison à une valeur initiale utilisée au cours d'un chiffrement.
- Le procédé selon la Revendication 2 où le procédé comprend en outre la détection d'erreurs de déchiffrement résultant d'une comparaison de la première partie de données déchiffrées à une valeur initiale utilisée au cours d'un chiffrement.
- Le procédé selon la Revendication 2 où les deuxième, troisième et quatrième parties de données déchiffrées comprennent des informations de commande, et où les informations de commande comprennent des pointeurs d'adresse qui pointent vers des emplacements mémoire dans une mémoire de récepteur.
- Le procédé selon la Revendication 2 où la deuxième partie de données déchiffrées comprend des informations de commande, où les informations de commande comprennent des pointeurs d'adresse qui pointent vers des emplacements mémoire dans une mémoire de récepteur, où les troisième et quatrième parties de données déchiffrées comprennent une clé de programme, et où le procédé comprend en outre :la réception de données de programme chiffrées (en 182), et,le déchiffrement des données de programme chiffrées (en 184) conformément à la clé de programme.
- Le procédé selon la Revendication 2 où la deuxième partie de données déchiffrées comprend des informations de commande, et où la troisième et la quatrième parties de données d'entrée comprennent une clé de modification (MK) qui est utilisée pour déchiffrer une clé de programme (PK) qui est utilisée pour déchiffrer des données de programme.
- Le procédé selon la Revendication 1 où les deuxième, quatrième et sixième clés sont plus courtes que les première, troisième et cinquième clés.
- Le procédé selon la Revendication 1 où les deuxième, quatrième et sixième clés possèdent une longueur qui est la moitié d'une longueur des première, troisième et cinquième clés.
- Le procédé selon la Revendication 1 comprenant en outre :la réception d'une clé de programme avant le message chiffré,la réception, à partir de l'émetteur, de données chiffrées dans le train de transport MPEG, et,la synchronisation, en réponse au message chiffré reçu, de l'utilisation de la clé de programme de façon à déchiffrer les données chiffrées reçues.
- Le procédé selon la Revendication 9 où la réception d'un message chiffré comprend la réception d'un message chiffré courant, où la réception d'une clé de programme comprend la réception d'une signal de clé de programme dans le train de transport MPEG avant la réception du message chiffré courant, et où le signal de clé de programme contient la clé de programme reçue.
- Le procédé selon la Revendication 10 où la clé de programme reçue de l'émetteur est chiffrée, et où la synchronisation de l'utilisation de la clé de programme de façon à déchiffrer les données chiffrées reçues comprend :le déchiffrement de la clé de programme chiffrée, et,le déchiffrement des données chiffrées reçues conformément à la clé de programme déchiffrée.
- Le procédé selon la Revendication 11 où le déchiffrement de la clé de programme chiffrée comprend le déchiffrement de la clé de programme chiffrée conformément à une clé de modification, où le procédé comprend en outre la réception d'un signal de clé de modification qui est reçu dans un signal reçu avant la réception d'un signal de clé de programme, et où le signal de synchronisation de clé de modification contient la clé de modification.
- Le procédé selon la Revendication 9 où le message chiffré reçu est déchiffré après l'utilisation de la clé de programme de façon à déchiffrer les données chiffrées reçues synchronisées par le message chiffré reçu.
- Le procédé selon la Revendication 1 comprenant en outre :la réception d'une clé de programme chiffrée,le déchiffrement de la clé de programme chiffrée conformément à une ou plusieurs des première, deuxième, troisième et quatrième parties de données déchiffrées, et,le déchiffrement des données chiffrées reçues conformément à la clé de programme déchiffrée.
- Le procédé selon la Revendication 14 où le message chiffré comprend un premier message chiffré reçu dans le train de transport MPEG, où la réception d'une clé de programme chiffrée comprend la réception de la clé de programme chiffrée dans un deuxième message chiffré après que le premier message chiffré soit reçu, où le déchiffrement de la clé de programme chiffrée comprend le déchiffrement de la clé de programme chiffrée conformément à une clé de modification, et où la clé de modification est contenue dans le premier message chiffré.
- Le procédé selon la Revendication 1 comprenant en outre :la réception d'une pluralité de clés de programme,la permutation des clés de programme selon un motif, où le motif est une séquence de permutation répétitive, et,le déchiffrement des données reçues en fonction des clés de programme permutées, où la permutation des clés entraîne l'utilisation de séquences différentes des mêmes clés dans le déchiffrement des données reçues.
- Le procédé selon la Revendication 16 comprenant en outre la réception d'une identification du motif à partir d'un émetteur.
- Le procédé selon la Revendication 1 comprenant en outre :la réception d'au moins un programme chiffré et de données PSI non chiffrées, où les données PSI non chiffrées portent sur le programme chiffré,la localisation du programme chiffré en fonction des données PSI non chiffrées, et le déchiffrement du programme chiffré localisé selon une clé de programme.
Applications Claiming Priority (6)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US11/137,272 US8189786B2 (en) | 2005-05-25 | 2005-05-25 | Encryption system |
US11/342,460 US7936870B2 (en) | 2005-05-25 | 2006-01-30 | Rotation of keys during encryption/decryption |
US11/343,060 US7929704B2 (en) | 2005-05-25 | 2006-01-30 | Modified triple wrap encryption/decryption system |
US11/342,479 US8144868B2 (en) | 2005-05-25 | 2006-01-30 | Encryption/decryption of program data but not PSI data |
US11/342,472 US8054974B2 (en) | 2005-05-25 | 2006-01-31 | Opportunistic use of null packets during encryption/decryption |
EP06760123A EP1889478B8 (fr) | 2005-05-25 | 2006-05-18 | Chiffrement/dechiffrement de donnees de programmes a l'exception des informations specifiques programme |
Related Parent Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
EP06760123A Division EP1889478B8 (fr) | 2005-05-25 | 2006-05-18 | Chiffrement/dechiffrement de donnees de programmes a l'exception des informations specifiques programme |
EP06760123.7 Division | 2006-05-18 |
Publications (2)
Publication Number | Publication Date |
---|---|
EP2219376A1 EP2219376A1 (fr) | 2010-08-18 |
EP2219376B1 true EP2219376B1 (fr) | 2012-10-24 |
Family
ID=37188977
Family Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
EP06760123A Active EP1889478B8 (fr) | 2005-05-25 | 2006-05-18 | Chiffrement/dechiffrement de donnees de programmes a l'exception des informations specifiques programme |
EP10162797A Active EP2219376B1 (fr) | 2005-05-25 | 2006-05-18 | Cryptage/décryptage de données de programme hors données PSI |
Family Applications Before (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
EP06760123A Active EP1889478B8 (fr) | 2005-05-25 | 2006-05-18 | Chiffrement/dechiffrement de donnees de programmes a l'exception des informations specifiques programme |
Country Status (5)
Country | Link |
---|---|
EP (2) | EP1889478B8 (fr) |
KR (1) | KR101260387B1 (fr) |
AT (1) | ATE515885T1 (fr) |
CA (2) | CA2854952C (fr) |
WO (1) | WO2006127405A2 (fr) |
Families Citing this family (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
KR101151107B1 (ko) * | 2008-08-12 | 2012-06-01 | 에스케이플래닛 주식회사 | 영상 암호화 시스템 및 방법 |
Family Cites Families (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JPH07295800A (ja) * | 1994-04-22 | 1995-11-10 | Advance Co Ltd | ソフトウエアプロテクト方式 |
US5774549A (en) * | 1995-12-04 | 1998-06-30 | Sun Microsystems, Inc. | Method and apparatus that processes a video signal to generate a random number generator seed |
US7242772B1 (en) * | 2000-09-07 | 2007-07-10 | Eastman Kodak Company | Encryption apparatus and method for synchronizing multiple encryption keys with a data stream |
US7206411B2 (en) | 2003-06-25 | 2007-04-17 | Wegener Communications, Inc. | Rapid decryption of data by key synchronization and indexing |
-
2006
- 2006-05-18 CA CA2854952A patent/CA2854952C/fr active Active
- 2006-05-18 EP EP06760123A patent/EP1889478B8/fr active Active
- 2006-05-18 CA CA2609505A patent/CA2609505C/fr active Active
- 2006-05-18 EP EP10162797A patent/EP2219376B1/fr active Active
- 2006-05-18 AT AT06760123T patent/ATE515885T1/de active
- 2006-05-18 KR KR1020077028821A patent/KR101260387B1/ko active IP Right Grant
- 2006-05-18 WO PCT/US2006/019298 patent/WO2006127405A2/fr active Application Filing
Also Published As
Publication number | Publication date |
---|---|
CA2854952A1 (fr) | 2006-11-30 |
WO2006127405A3 (fr) | 2007-04-05 |
EP2219376A1 (fr) | 2010-08-18 |
KR101260387B1 (ko) | 2013-05-07 |
CA2854952C (fr) | 2015-09-08 |
EP1889478B8 (fr) | 2011-09-28 |
ATE515885T1 (de) | 2011-07-15 |
EP1889478A2 (fr) | 2008-02-20 |
CA2609505C (fr) | 2015-10-20 |
KR20080026100A (ko) | 2008-03-24 |
WO2006127405A2 (fr) | 2006-11-30 |
EP1889478B1 (fr) | 2011-07-06 |
CA2609505A1 (fr) | 2006-11-30 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US8189786B2 (en) | Encryption system | |
JP3655921B2 (ja) | 伝送地点において複数のサービスを一意的に暗号化するための方法及び装置 | |
JPH08195735A (ja) | デコーダ装置 | |
CA2876882C (fr) | Cles de donnees rotatives pendant le chiffrement de donnees, en fonction des donnees de controle de rotation des cles | |
EP2219376B1 (fr) | Cryptage/décryptage de données de programme hors données PSI |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PUAI | Public reference made under article 153(3) epc to a published international application that has entered the european phase |
Free format text: ORIGINAL CODE: 0009012 |
|
17P | Request for examination filed |
Effective date: 20100513 |
|
AC | Divisional application: reference to earlier application |
Ref document number: 1889478 Country of ref document: EP Kind code of ref document: P |
|
AK | Designated contracting states |
Kind code of ref document: A1 Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LI LT LU LV MC NL PL PT RO SE SI SK TR |
|
17Q | First examination report despatched |
Effective date: 20101014 |
|
RAP1 | Party data changed (applicant data changed or rights of an application transferred) |
Owner name: LEWIS, RICHARD Owner name: ZENITH ELECTRONICS LLC |
|
GRAP | Despatch of communication of intention to grant a patent |
Free format text: ORIGINAL CODE: EPIDOSNIGR1 |
|
GRAS | Grant fee paid |
Free format text: ORIGINAL CODE: EPIDOSNIGR3 |
|
GRAA | (expected) grant |
Free format text: ORIGINAL CODE: 0009210 |
|
AC | Divisional application: reference to earlier application |
Ref document number: 1889478 Country of ref document: EP Kind code of ref document: P |
|
AK | Designated contracting states |
Kind code of ref document: B1 Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LI LT LU LV MC NL PL PT RO SE SI SK TR |
|
REG | Reference to a national code |
Ref country code: GB Ref legal event code: FG4D |
|
REG | Reference to a national code |
Ref country code: CH Ref legal event code: EP |
|
REG | Reference to a national code |
Ref country code: AT Ref legal event code: REF Ref document number: 581440 Country of ref document: AT Kind code of ref document: T Effective date: 20121115 |
|
REG | Reference to a national code |
Ref country code: IE Ref legal event code: FG4D |
|
REG | Reference to a national code |
Ref country code: DE Ref legal event code: R096 Ref document number: 602006032722 Country of ref document: DE Effective date: 20121220 |
|
REG | Reference to a national code |
Ref country code: ES Ref legal event code: FG2A Ref document number: 2398347 Country of ref document: ES Kind code of ref document: T3 Effective date: 20130315 |
|
REG | Reference to a national code |
Ref country code: NL Ref legal event code: VDEP Effective date: 20121024 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: IS Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130224 Ref country code: NL Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20121024 Ref country code: FI Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20121024 Ref country code: SE Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20121024 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: LV Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20121024 Ref country code: PT Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130225 Ref country code: GR Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130125 Ref country code: SI Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20121024 Ref country code: PL Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20121024 Ref country code: BE Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20121024 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: DK Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20121024 Ref country code: BG Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130124 Ref country code: CZ Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20121024 Ref country code: SK Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20121024 Ref country code: EE Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20121024 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: RO Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20121024 |
|
PLBE | No opposition filed within time limit |
Free format text: ORIGINAL CODE: 0009261 |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT |
|
26N | No opposition filed |
Effective date: 20130725 |
|
REG | Reference to a national code |
Ref country code: DE Ref legal event code: R097 Ref document number: 602006032722 Country of ref document: DE Effective date: 20130725 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: CY Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20121024 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: MC Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20121024 |
|
REG | Reference to a national code |
Ref country code: CH Ref legal event code: PL |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: LI Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20130531 Ref country code: CH Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20130531 |
|
REG | Reference to a national code |
Ref country code: IE Ref legal event code: MM4A |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: IE Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20130518 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: LT Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20121024 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: HU Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT; INVALID AB INITIO Effective date: 20060518 Ref country code: LU Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20130518 |
|
REG | Reference to a national code |
Ref country code: FR Ref legal event code: PLFP Year of fee payment: 11 |
|
REG | Reference to a national code |
Ref country code: FR Ref legal event code: PLFP Year of fee payment: 12 |
|
REG | Reference to a national code |
Ref country code: FR Ref legal event code: PLFP Year of fee payment: 13 |
|
PGFP | Annual fee paid to national office [announced via postgrant information from national office to epo] |
Ref country code: IT Payment date: 20230412 Year of fee payment: 18 |
|
PGFP | Annual fee paid to national office [announced via postgrant information from national office to epo] |
Ref country code: TR Payment date: 20230516 Year of fee payment: 18 |
|
PGFP | Annual fee paid to national office [announced via postgrant information from national office to epo] |
Ref country code: FR Payment date: 20240308 Year of fee payment: 19 |
|
PGFP | Annual fee paid to national office [announced via postgrant information from national office to epo] |
Ref country code: GB Payment date: 20240402 Year of fee payment: 19 |
|
PGFP | Annual fee paid to national office [announced via postgrant information from national office to epo] |
Ref country code: DE Payment date: 20240326 Year of fee payment: 19 |
|
PGFP | Annual fee paid to national office [announced via postgrant information from national office to epo] |
Ref country code: ES Payment date: 20240611 Year of fee payment: 19 |
|
PGFP | Annual fee paid to national office [announced via postgrant information from national office to epo] |
Ref country code: AT Payment date: 20240425 Year of fee payment: 19 |